Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
File: ERk_jomOtvvRLFPffa0CFUPu_G4.mft (raw, json)
Hash identifier: gqSOvSgV/7bYwBBHfwcAmhXwq8ZcQluwsEqRuTGGFSM=
Subject key identifier: C8:5C:52:2D:5D:0F:D5:6A:A1:86:72:66:46:8C:76:C3:EF:02:98:9B
Authority key identifier: 11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
Certificate issuer: /CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Certificate serial: 019F17C298E361F558FC36F1D152E7066E4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
Manifest number: 0DEE
Signing time: Tue 30 Jun 2026 09:00:56 +0000
Manifest this update: Tue 30 Jun 2026 09:00:56 +0000
Manifest next update: Wed 01 Jul 2026 09:00:56 +0000
Files and hashes: 1: ERk_jomOtvvRLFPffa0CFUPu_G4.crl (hash: iVrIdQZkiF1XB1uTsxt3LJVpkv4AKoHqHNJR86cXTvs=)
2: R54X7zTNG912i2EvC7AKSQH7Vtc.roa (hash: t8SIcyAg5d0NiVmbOss6KTkA5q+y1vbgNzl8dJK1AX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:98:e3:61:f5:58:fc:36:f1:d1:52:e7:06:6e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11193f8e898eb6fbd12c53df7dad021543eefc6e
Validity
Not Before: Jun 30 09:00:56 2026 GMT
Not After : Jul 1 09:00:56 2026 GMT
Subject: CN=c85c522d5d0fd56aa1867266468c76c3ef02989b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:32:42:c7:ac:99:55:49:db:c5:15:03:e3:95:
52:b4:ab:a1:33:70:e5:6f:8d:c5:83:a7:a3:15:ca:
f5:bf:c1:07:31:8a:9f:f2:80:58:09:c2:5f:ab:2c:
c5:df:66:3c:f9:8f:92:c8:38:d8:bc:cd:50:b6:e9:
df:2e:a4:51:ab:00:7e:09:e6:38:49:1f:75:dc:2f:
8f:65:98:71:90:dc:8b:6c:a1:ec:f9:0f:d7:eb:31:
33:9f:a8:ec:64:62:37:22:c0:c6:1c:1d:cd:39:8a:
d9:a6:ff:9d:49:b3:6d:98:ae:f2:46:89:f0:53:41:
19:0b:0c:9d:8e:3e:60:c5:dc:94:20:64:75:5d:02:
eb:9a:e9:03:e6:9c:8e:c1:e5:c0:c6:5f:c2:cc:61:
d4:00:b9:dc:7f:e0:65:fa:f2:9a:81:2d:f6:c1:ae:
ed:5d:95:c0:fb:09:e1:6f:ed:ee:48:9d:35:3e:0a:
68:26:77:cb:3b:c9:d4:c1:63:76:ee:64:df:1f:d7:
9f:9e:32:84:f6:83:06:3e:2f:cd:8b:3b:81:40:fa:
70:5b:8a:0b:72:87:35:c3:c0:d2:b6:ae:b3:c7:ea:
76:85:e8:08:21:7a:41:d1:75:4d:fb:27:54:d2:f1:
82:b5:0b:29:24:02:1f:d2:aa:d7:00:27:64:17:ce:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5C:52:2D:5D:0F:D5:6A:A1:86:72:66:46:8C:76:C3:EF:02:98:9B
X509v3 Authority Key Identifier:
keyid:11:19:3F:8E:89:8E:B6:FB:D1:2C:53:DF:7D:AD:02:15:43:EE:FC:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERk_jomOtvvRLFPffa0CFUPu_G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b4e3e4-1189-4036-8f1a-042f7dac24d5/1/ERk_jomOtvvRLFPffa0CFUPu_G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:93:19:f7:d1:11:7b:f3:41:e7:33:18:2a:3f:a2:22:94:49:
6c:6f:55:69:95:85:4b:23:af:02:90:bc:f7:0b:45:99:a9:16:
be:0c:fa:74:a1:e8:40:3c:c2:3e:b9:90:dd:57:5b:10:d1:6d:
ea:26:f9:c0:e0:68:ac:38:40:ea:f4:44:ea:3c:86:69:ca:50:
94:57:65:2b:04:ca:fd:b5:f7:df:28:cf:aa:bf:6d:9e:04:8f:
17:c0:cd:57:01:62:d2:3c:25:cf:64:a7:fe:e7:3f:1e:f8:8d:
b5:4b:7e:4a:9e:52:b6:e3:86:39:77:b1:dd:47:4f:36:4a:a3:
57:c1:cf:30:1e:12:c8:c6:f7:a5:9b:ec:11:a3:6a:05:cd:d3:
2a:01:d8:d0:eb:1d:60:01:26:80:c4:3d:9f:d8:fc:c8:d8:15:
0c:9a:3d:be:2e:45:9a:f8:84:03:81:d9:1e:49:86:c4:d1:d5:
2a:2e:92:c8:b7:ab:f2:2b:07:9a:a7:86:f6:f1:cf:06:04:cd:
58:2c:fc:f5:df:9a:b4:03:70:61:9e:9b:b7:e8:7a:ea:73:00:
c9:97:60:71:98:60:cf:b4:9e:7d:7e:88:59:42:0f:4e:ab:17:
7a:d3:0f:67:f8:75:3c:c3:c6:d0:43:53:7f:2b:89:96:a1:dd:
7c:72:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:45 2026 by rpki-client